Cybersecurity & Regolamentazione UE

News & Sicurezza

Aggiornamenti da ENISA, NVD e le principali fonti di cybersecurity europee. Tutto quello che un Responsabile Tecnico deve sapere.

53859 risultati

VulnerabilitàAlta
CVE-2026-26246 - Memory Exhaustion via Malformed PSD File Upload

CVE ID :CVE-2026-26246 Published : March 16, 2026, 11:33 a.m. | 2 hours, 37 minutes ago Description :Mattermost versions 11.3.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-4236 - itsourcecode Online Enrollment System index.php sql injection

CVE ID :CVE-2026-4236 Published : March 16, 2026, 11:32 a.m. | 38 minutes ago Description :A security vulnerability has been detected in itsourcecode Online Enrollment System 1.0. Impacted is an unknown function of the file /enrollment/index.php?view=add. Such manipulation of the argument txtsearch/deptname/name leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2458 - Unauthorized channel enumeration in private teams after member removal

CVE ID :CVE-2026-2458 Published : March 16, 2026, 11:27 a.m. | 2 hours, 43 minutes ago Description :Mattermost versions 11.3.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2457 - WebSocket Message Spoofing via Permalink Embed Manipulation

CVE ID :CVE-2026-2457 Published : March 16, 2026, 11:20 a.m. | 2 hours, 50 minutes ago Description :Mattermost versions 11.3.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2461 - Missing authorization check allows unauthorized modification of other users' comments on a board

CVE ID :CVE-2026-2461 Published : March 16, 2026, 11:16 a.m. | 2 hours, 54 minutes ago Description :Mattermost Plugins versions Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2463 - Unauthorized access to invite ID during team creation

CVE ID :CVE-2026-2463 Published : March 16, 2026, 11:13 a.m. | 2 hours, 57 minutes ago Description :Mattermost versions 11.3.x Severity: 4.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2476 - MS Teams plugin sensitive config values not properly masked in support packets

CVE ID :CVE-2026-2476 Published : March 16, 2026, 11:11 a.m. | 2 hours, 59 minutes ago Description :Mattermost Plugins versions Severity: 7.6 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-2456 - Denial of Service via Unbounded Memory Allocation in Integration Actions

CVE ID :CVE-2026-2456 Published : March 16, 2026, 11:06 a.m. | 3 hours, 4 minutes ago Description :Mattermost versions 11.3.x Severity: 5.3 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2026-4235 - itsourcecode Online Enrollment System login.php sql injection

CVE ID :CVE-2026-4235 Published : March 16, 2026, 11:02 a.m. | 1 hour, 8 minutes ago Description :A weakness has been identified in itsourcecode Online Enrollment System 1.0. This issue affects some unknown processing of the file /sms/login.php. This manipulation of the argument user_email causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
News
Vulnerabilities in multiple tinycontrol devices

Vulnerabilities in multiple tinycontrol devices Vulnerabilities in multiple tinycontrol devices CVE ID CVE-2025-11500 Publication date 16 March 2026 Vendor tinycontrol Product tcPDU and LAN Controllers: LK3.5, LK3.9 and LK4 Vulnerable versions Befo ... Read more Published Date: Mar 16, 2026 (1 day, 15 hours ago) Vulnerabilities has been mentioned in this article. CVE-2025-15587 CVE-2025-11500

CVEfeed Newsroom16 mar 2026
VulnerabilitàAlta
CVE-2025-15554 - Admin Passwords Cached by Browsers in Truesec LAPSWebUI

CVE ID :CVE-2025-15554 Published : March 16, 2026, 10:46 a.m. | 3 hours, 24 minutes ago Description :Browser caching of LAPS passwords in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin passwords. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026
VulnerabilitàAlta
CVE-2025-15553 - Insecure Logout Functionality in Truesec LAPSWebUI

CVE ID :CVE-2025-15553 Published : March 16, 2026, 10:45 a.m. | 3 hours, 25 minutes ago Description :Non-working logout functionality in Truesec’s LAPSWebUI before version 2.4 allows an attacker with access to a workstation to escalate their privileges via disclosure of local admin password. Severity: 6.0 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVEfeed CVE16 mar 2026

Pagina 4002 di 4489

Resta aggiornato sulla cybersecurity

Iscriviti a CodersRegistry per ricevere gli aggiornamenti più importanti su regolamentazione EU e vulnerabilità critiche.